North Korean hackers exploit VS Code tasks.json auto-run since Dec 2025 to deploy StoatWaffle malware, stealing data and ...
GlassWorm campaign injects malware into GitHub Python repos using stolen tokens since March 8, 2026, exposing developers to ...
The Glassworm campaign has compromised over 151 GitHub repositories and npm packages using invisible Unicode payloads that ...
at file:///c:/Users/JohnM/AppData/Local/Programs/Microsoft%20VS%20Code%20Insiders/11246017b6/resources/app/extensions/github/dist/extension.js:1:383 at file:///c ...
When I open my local copy of my tracking repo of the microsoft/vscode repo I get this message in the Extension Host output channel: 2026-03-05 16:37:29.200 [info] ExtensionService#_doActivateExtension ...